Indicator

Recognized action, specific, generalized, or theoretical, that an adversary might be expected to take in preparation for an attack.
SOURCE: CNSSI-4009

A sign that an incident may have occurred or may be currently occurring.
SOURCE: SP 800-61